Image credit: Photo by Michael Geiger on Unsplash

Cybersecurity Attacks & Hacking Crimes | Online safety | Internet Banking

Information Technology & Communication Systems Education

NCC has raised the alarm over extremely damaging malware called ‘FluBot’ — which attacks Android devices to steal banking information.

The Nigerian Communications Commission (NCC) has raised the alarm over extremely damaging malware called ‘FluBot’ — which attacks Android devices to steal banking information.

Ikechukwu Adinde, NCC’s director of public affairs, said this in a statement issued on Friday. His statement read, “According to the information received today, October 21, 2021, from the Nigeria Computer Emergency Response Team (ngCERT), Flubot “targets Androids with fake security updates and App installations.

Flubot “mimics Android mobile banking apps to draw fake web views on targeted apps to steal personal data and credit card details

ngCERT claims that Flubot “mimics Android mobile banking apps to draw fake web views on targeted apps” and that its focus goes beyond the theft of personal data and basically aims to steal credit card details or online banking credentials.

Adinde explained that FluBot Malware is circulated through SMS and it is capable of snooping on incoming notifications, initiating calls, reading or writing SMSes, and transmitting the victim’s contact list to its control center.

The statement also adds that the new malware undermines device security by copying fake login screens from major banks and when users enter their login details on fake pages, their data is collected and sent to malware operator checkpoints from where data is exploited by intercepting  One Time. Password (OTP) related to banking services and changing the default SMS app on the target Android device

NCC issued advice to telecoms consumers from falling victims.

The NCC issued an advisory to protect telecoms consumers from falling victims of Flubot Malware

The guidelines listed by the commission are:

• Do not click on the link if you receive a suspicious text message, and do not install any app or security update the page asks you to install.
• Use updated antivirus software that detects and prevents malware infections.
• Apply critical patches to the system and application.
• Use strong passwords and enable Two-Factor Authentication (2FA) over logins.
• Back up your data regularly.
• If you have been affected by this campaign, you should reset your device to factory mode as soon as possible. This will delete any data on your phone, including personal data.
• Do not restore from backups created after installing the app. You may contact ngCERT on *incident@cert.gov.ng* for technical assistance.
• You will also need to change the passwords to all of your online accounts, with urgency, around your online bank accounts.
•  If you have concerns that your accounts may have been accessed by unauthorised people, contact your bank immediately.

Read on from the Cable

Other interesting Eduonwheels’ Cybersecurity, hacking, and Online safety posts that you might like:

Cybercriminal hacks into Nigerian Banking System steal N1.87 Billion

7 Key Ways Cybercriminals Commit Cyber Attacks

Cybercriminals are grooming schoolkids to help steal savings from victims’ bank account

Did 13-year-old Chinese hacker, Sun Ji Su, hack Facebook, Messenger, WhatsApp, and Instagram?

8 popular Android apps banned on Play Store

Hackers are trying to overthrow a European president

Has your cryptocurrency investment been tampered with in the latest hack?

This blog content on ‘The new FluBot malware targets Android devices to steal banking information’ is categorized under Information Technology and Communication System Education.

Our Information Technology and Communication System Education is about creating and delivering impacting, and empowering problem-solving information, and enhancing effective communication skills to our amiable readers for better livelihood – Eduonwheels.